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Abstract 

In this paper, we consider communication on a two-hop channel, in which a source wants to send information reliably and 
securely to the destination via a relay. We consider both the untrusted relay case and the external eavesdropper case. In the untrusted 
relay case, the relay behaves as an eavesdropper and there is a cooperative node which sends a jamming signal to confuse the 
relay when the it is receiving from the source. We propose two secure transmission schemes using the scaled compute-and-forward 
technique. One of the schemes is based on a random binning code and the other one is based on a lattice chain code. It is proved 
that in either the high Signal-to-Noise-Ratio (SNR) scenario and/or the restricted relay power scenario, if the destination is used 
as the jammer, both schemes outperform all existing schemes and achieve the upper bound. In particular, if the SNR is large and 
the source, the relay, and the cooperative jammer have identical power and channels, both schemes achieve the upper bound for 
secrecy rate, which is merely 1/2 bit per channel use lower than the channel capacity without secrecy constraints. We also prove 
that one of our schemes achieves a positive secrecy rate in the external eavesdropper case in which the relay is trusted and there 
exists an external eavesdropper. 


Index Terms 

Compute-and-Forward, Two-hop Channel, Untrusted Relay, Information Theoretic Security, Weak Secrecy. 


I. Introduction 

I NFORMATION theoretic security is a problem considered by Shannon whereby no message can be retrieved even if an 
eavesdropper knows the coding scheme and has infinite computation capabilities [I]. This concept has been well studied for 
many channels, e.g., the wire-tap channel ||2|. The concept “secrecy rate” is proposed in 11 for the rate of the communication 
under the constraint that the information leaked to the eavesdropper per channel use tends to zero when the number of channel 
uses tends to inhnity (a constraint also known as weak secrecy). 

As many other classic channels, the secure transmission problem on a two-hop channel with an untrusted relay has been well 
studied. This channel consists of a pair of source and destination using an untrusted relay to forward the message. The relay is 
considered to be malicious but cooperative, it overhears the message but makes no change on it. This channel was first studied 
in 0, in which a rather pessimistic conclusion is drawn that no positive secrecy rate can be achieved by the straightforward 
transmission scheme. However, a later study in proposed a cooperative jamming 0 based approach to achieve a positive 
secrecy rate, in which a cooperative node (sometimes the destination) is introduced to simultaneously transmit a jamming signal 
to confuse the relay while the source is transmitting. The relay then encodes its reception and transmits it to the destination. 
With prior knowledge of the jamming signal, the destination is able to decode the source message. 

Several secure transmission schemes have been proposed based on cooperative jamming in 0 and 0 - 111 . In a, the 
source is encoded with a Gaussian code, the cooperative jammer transmits a random Gaussian signal, and the relay forwards 
the description of its received signal using the compress-and-forward scheme 0 . A similar scheme based on amplify-and- 
forward O is used in 0. The amplify-and-forward based scheme is improved in 0 by using a lattice code instead of 
Gaussian code at the source. This scheme is called modulo-and-forward, since the relay can take a modulo operation w.r.t. 
lattice structure of the code to achieve a higher secrecy rate. A compute-and-forward IfTOl based scheme was introduced in ifTTll 
for a symmetric two-hop channel, in which both of the transmitting and the jamming messages are encoded with lattice codes. 
The relay decodes a linear combination of these messages and then sends it to the destination. Albeit the achievable secrecy 
rate of in is lower than a, this compute-and-forward based scheme can be used in a line network since it does not suffer 
from noise accumulation. In m . a similar compute-and-forward based scheme was introduced which achieves strong secrecy 
with the same secrecy rate as M. In m, another compute-and-forward based scheme was proposed for the multi-way relay 
channel which achieves weak secrecy rate. Bi-directional transmission on this channel is studied in m, in which a higher 
level of secrecy, namely perfect secrecy, is achieved by another compute-and-forward based scheme. 

In this paper, we propose two novel secure and reliable transmission schemes based on a modihed version of compute-and- 
forward D3, which we call scaled compute-and-forward. The main contributions of this paper are the following: 
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• Two novel scaled compute-and-forward based secure transmission schemes are proposed for the two-hop channel with an 
untrusted relay, which use a random binning code and a lattice chain to create randomness at the source, respectively. These 
are the first secure transmission schemes for this problem that are based on the scaled compute-and-forward technique. 

> In the symmetric case where the power and channel gains for the source, the relay, and the destination are identical, both 
of our schemes achieve a secrecy rate of l/21og2(l/2 + SNR) — 1/2, in which SNR stands for Signal-to-Noise-Ratio. 
This is merely 1/2 bit per channel use away from the transmit rate using compute-and-forward on this channel. This rate 
is upper bound achieving when the SNR is high and is the best secrecy rate achieved so far on this channel. 

• Our schemes significantly improve the achievable secrecy rate and achieve the upper bound in many asymmetric scenarios. 
In general, our schemes have better performance than other existing schemes in the high SNR scenario for almost all 
channel configurations. 

• We consider a novel secure transmission problem on the two-hop channel, in which the relay is trusted and there exist an 
external eavesdropper. The problem is different from the wire-tap type of problem and the untrusted relay problem, and 
the existing secure transmission schemes cannot be directly used. We prove that one of our schemes can also be applied 
on this channel and achieves a positive secrecy rate. 

The paper is organized as follows. In Section HI] we build up the model, give the state-of-the-art on the problem, and briefly 
introduce the scaled compute-and-forward technique as proposed in lITSl . In Section |III| we introduce a reliable scaled compute- 
and-forward based code for transmission, which will be used as the transmission code throughout this paper. In Section UVl we 
introduce two secure coding schemes which are built upon our reliable transmission scheme and provide secrecy. In Section |V| 
we compare the rates of our schemes with the state-of-the-art. In Section IVII we consider another two-hop channel model 
in which the relay is trusted and there exist an external eavesdropper. We show that one of our schemes can also achieve a 
positive secrecy rate in this case. In Section IVIIl we conclude this paper. 

II. Preliminaries 

A. Model 

In this paper, we consider the model used in HI. The model consists of a two-hop channel, in which node A wants to transmit 
information to node C using an untrusted relay node R to forward the information. To guarantee secure communication, another 
node B, a Cooperative Jammer, is added to the network, which transmits a jamming signal to confuse the relay. We assume 
that the communication takes places over two phases, each including N channel uses. We use for the 

transmitted sequences of node A, the cooperative jammer B, and the relay R, respectively. We use ,Y,f G for 

the receptions of the relay and node C in Phase 1 and 2, respectively. In the first phase, node A transmits to the relay and the 
cooperative jammer B simultaneously transmits a jamming signal to confuse the relay. The jamming signal transmitted by the 
cooperative jammer B is also received by node C. We have 

Y^ = X^ + X^ + (1) 

Y^ = X^ + Z^, (2) 

where Z^ and Z^ are A^-dimensional independent Gaussian noise vectors with variance 1 and in each dimension, 
respectively. Note that when a = 0, the model is equivalent to the model in which the destination is used as jammer. 

In the second phase, the relay transmits to node C. We have 

Yf = X^ + Z^, (3) 

where Zf is an iV-dimensional independent Gaussian noise vector with variance 1 in each dimension. The power constraints 
for the three nodes are defined as 

E[\\X^\\^]<NP,,i&{A,B,R}. (4) 

It seems that we lose some generality by assuming the channel coefficients and Z^, Z^ to be unit. However, this assumption 
is actually w.l.o.g. and can be easily extended to any configuration of power constraints, channel coefficients, and noise variances 
with the same SNR for the receptions Y^, Y-f^, and Y^. 

We assume that the power constraints as well as cr^ are revealed to all nodes. The source message of node A is defined 
as ^ U{{1,2,..., 2^^“}), where the notation X ^ U{S) is used for a random variable X that is uniformly chosen at 
random from the alphabet S. A secrecy rate Rg is said to be achievable if for any <5 > 0, there exists a sequence of (2^^", N) 
codes such that the reliability constraint 

lim ^ W^) = 0 (5) 

N—^OO 


lim —I(W^;Y^) 
N-^oo N 


< S 


and the (weak) secrecy constraint 


(6) 
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Fig. 1: Two-hop channel with a cooperative jammer. 


hold. Here, is the estimation of based on the reception Tp and at node C. Further, we use the notation R+ for 
the set of positive real numbers, for the set of positive integers, and C(x) for the capacity of Gaussian channel with SNR 
equal to x, i.e., 

^ (7) 


C(x) = -log 2 (l + a:) 


B. State-of-the-Art 

1) An Upper Bound on the Secrecy Rate: An upper bound on the secrecy rate is derived in by transforming this model 
to an equivalent multiple access wire-tap channel. The secrecy rate is upper bounded by 


P _ 1, {Pa + 1)(-Pa + -Pb + 1) — {Pa + pY 


( 8 ) 


where _^_ 

2Pa + PaPb + Pb- V^PbP'a + ^PbPa + P^PX + 2P'^Pa + P'^ 

^ ^Pa . O 

2) Amplify-and-Forward Based Scheme: A straightforward amplify-and-forward based scheme is proposed in for the 
case that the destination is used as the jammer, i.e., cr = 0. In this scheme the destination transmits a Gaussian jamming signal 
and the relay simply amplifies the received signal and transmits it to the destination. This scheme achieves any secrecy rate 
satisfying 


Rs < 




PaPr 


Pa + Pb + Pr ^ 




Pb + i) 


( 10 ) 


3) Modulo-and-Forward Based Scheme: In Q another scheme is proposed which uses a lattice code based coding scheme 
to transmit the message with an extra random vector. The destination, which is also the cooperative jammer (tr = 0), transmits 
a Gaussian signal to confuse the relay. Due to the lattice chain structure, the relay can take a modulo operation to remove the 
random part of the transmission which is useless in the decoding at the destination. This results in a higher SNR for the actual 
message vector. In other words, it is an advanced amplify-and-forward scheme which makes uses of the properties of lattice 
code and lattice chain. Any secrecy rate satisfying 


p 1, Pa + Pr + PaPr + 1 

Rs < — logo- 




Pb + iJ 


( 11 ) 


is achievable. 

4) Compress-and-Forward Based Scheme: A compress-and-forward based scheme is given in where the relay forwards 
a description of its noisy reception to the destination. Any secrecy rate 


Rs < max 

PA<Pa,pb<Pb 


C{ 


PA 


(1 -f (T^ -f 0-2) — ![pB + cr^) 


)-C{ 


PA 


1 +PB 


( 12 ) 


is achievable, where 


PA + 1+ Pbo"^ ! {PB + cr'^) 

Pr 


(13) 


5) Compute-and-Forward Based Scheme: Compute-and-forward is a relaying technique proposed in ifTOl in which the relay 
uses the superimposed nature of Gaussian additive channel and computes the linear combination of the transmitted messages 
of multiple users instead of individual messages. A compute-and-forward based scheme is proposed in im for a symmetric 
two-hop channel with jammer and destination collocated, in which node A transmits the source message encoded with a lattice 
codebook and node B (node C) transmits a random codeword choosing uniformly at random from the same lattice codebook. 
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An algebraic proof is given that the sum of two A^-dimensional lattice codewords will leak no more than N bits of information 


to the relay. Then, a random binning based scheme is used to eliminate the information leakage. For Pa = Pb = Pr and 
(7 = 0, any secrecy rate satisfying 

P's < 2 ^2 ~ ^ 

is achievable. It is proved in ifT^ that this rate is also achievable if we change the weak secrecy constraint (|6l) to a strong 
secrecy constraint 

Ymr I{W^\Y^)<5 (15) 

A^—^■OO 

by replacing the random binning based scheme to a universal hashing function based scheme. 

Another compute-and-forward based scheme is proposed in m, which also considers the case of Pa = Pb = Pr and 
(7 = 0. The focus of is on “perfect secrecy”, which is defined through 

lim = 0. (16) 

N—fCO 


A binning approach within the lattice codebook used for both A and B is used. The bins are selected such that for each source 
message, A randomly selects from a certain bin of codewords with a certain probability mass function. It is proved that if the 
bins and the probability mass functions are chosen appropriately, perfect secrecy is achievable with any secrecy rate satisfying 

<<^log2Q+P,4)-l-log2e. (17) 

This scheme is extended in ifTTl . in which the asymmetric channel/power case is considered. It is proved that perfect secrecy 
is achievable for some asymmetric configurations. 


C. Scaled Compute-and-Forward 


Scaled Compute-and-Forward (SCF) as proposed in M is a generalized version of the traditional compute-and-forward in 
M- It allows the senders to scale their lattice codebooks according to their prior knowledge of the channel states to achieve 
higher computation rates. Here we briefly introduce this technique for a two user Multiple Access Channel (MAC) case. 

A lattice A is a discrete subgroup of with the property that if Ti, T 2 S A, then Ti + T 2 S A. The lattice quantizer 
Qa is defined as Qa{X) = argmin^^g^ ||T — X||. The fundamental Voronoi region of the lattice is defined as V = {X S 
R^|(5a(X) = 0}. The modulo operation is defined as [7f] (mod A) = X — Qa{X). The lattice A' is said to be nested in A 
if A' C A. More details of lattices and lattice codes can be found in fTbl . 

We consider the two users having power Pa and Pb- Firstly, we construct a lattice A. Then we construct two coarse lattices 
A"^, A^ C A with second moment jvvoi(v*) fv‘ “ P^Pi’ * £ where V* is the fundamental Voronoi region of 

A® and Pi € is called the scaling coefficient. Here we assume that A, A'^ and A^ are simultaneously good for quantizing 
and shaping as discussed in El. 

For user i G {A,B}, we construct the codebook £® = A fl V®, where V® is the fundamental Voronoi region of A®. 
User i encodes its message into codeword T® using the codebook £®, and the channel input is formed as X® = [T®//3i + 
£)®] (mod A'^/Pi), where 77® ^ h({Vf/Pf) is called dither. Clearly, X® is also uniform in V'^ jPi and thus it has average power 


Pz. 

The receiver uses the fine lattice A for decoding the linear sum aiT^ + a 2 T^,ai,a 2 G Z. It is proved in ITSl that the 
destination is able to reliably decode this linear sum as long as the transmit rates are smaller than the computation rates 
7?gp(a, defined as 

flG(a./3) = ilog,(^). (18) 


where 


A/'(a,/3) 


PAPBjaiPA - Q2fe)^ + [qiPa^Pa + {a2PBfPB 
Pa + Pb + 1 


a = ( 01 , 02 ), and /3 = {Pa,Pb)- 

Remark 1: For any a and /3 it can be derived from (fT^ that the computation rates satisfy 


(19) 


7?^F(a,/3) < C{Pa),R^A^,P) < C{Pb). 


( 20 ) 


HI. A Scaled Compute-and-Forward Based Code for Reliable Transmission 

As introduced in Subsection III-CI the relay node is able to compute a linear combination with coefficients a by using 
lattice codebooks with average power Pi,i G {A,B} and scaled with coefficients (3 if the transmit rates are smaller than 
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the computation rates in (fTSl ). In this section, we will propose a reliable code for our channel, namely an (a,/3) SCF code. 
For given power Pi,i G A,B,R, this code will guarantee a reliable transmission from A to C for a source symbol chosen 
uniformly at random from {1,2,..., if 

< inin(C'(PR),it:cF(a;/3)) (21) 

and 

REA^,f3)<CiPB/a^)- (22) 

We will firstly introduce the lattice codebook construction in detail, then describe the transmission process. In the end, we 
will calculate the rate of information leaked to the relay with this scheme during the transmission. 

A. Codebook Construction 

Here we describe our codebook constructed with the SCF technique. For an (a, (3) SCF code and an arbitrarily chosen 
positive real number 6', we select a fine lattice A and a pair of shaping lattices A^(a,/3) Q A,i G {A,B} which have the 
following properties: 

• Power; We have 

AfVol(V^(a./3)) /v‘,(a,/3) ^.X = (3^ Pi, i G {A, B}, (23) 

where Vq is the fundamental Voronoi region of Xq{sl^I3). 

• Nesting: The coarser one of Ap(a,/3) is nested in the finer one. 

• Rate: Denote Rl{a.,(3) = log 2 |A n Vp(a,/3)|. Then, for the chosen S', we have 

RhAa,f3)-S' < Alia, f3) < IVcA^,(3). (24) 

• Goodness: These lattices are all good in both quantizing and shaping in the sense of ifThl . 

By HD, we can find lattices satisfying the above-mentioned properties. Then, we construct the lattice codebooks AnV^(a, /3) 
for transmission. 

B. Reliable Transmission Process 

. Phase 1, node A. 

Firstly, the message is uniquely mapped to a lattice vector in A fl V^(a,/3) by the encoder. Then, a dither is 
uniformly chosen from the scaled Voronoi region (a, /3) //3a- Note that dithers are chosen to fulfill the power constraints 
of lattice codes and are revealed to all nodes. The transmitted lattice vector of node A is 

= IT^//3a + dA (mod A^(a,/3)//3A). (25) 

. Phase 1, node B. 

Node B transmits a jamming signal, namely , which is uniformly chosen at random from AflV^ (a, (3). The transmitted 
vector is thus 

= [V^/Pb + dA (mod Ag(a,^)//3B), (26) 

in which ^ U{Vq {a, (3)/[3 b)- It it clear from the definition that the average power of both and X^ does not 
exceed the power constraint of (|4l). 

. Phase 1, node C 

By our codebook construction, node C can reliably decode if (|22]) holds. 

. Phase 1, the relay. 

Upon receiving in O, by nsi, the relay is able to decode 

= aiT^ + 

with the lattice A with high probability if 

Rl{a,l3)<R3cA^,l3),iG{A,B}, (27) 

which has already be guaranteed by the codebook construction in (l24li . 

. Phase 2, the relay 

The relay firstly scales the decoded vector down by computing C/^/ai = + {a 2 /ai)V^- Then, similar to the compute- 

and-forward scheme proposed for the two-way relay channel IfTSlI , a modulo operation is taken on the decoded vector. 
The lattice for the modulo operation A* should be chosen such that A* C Ap(a,/3) to guarantee that the vector can 
be retrieved by node C. For the sake of power, we let the relay take a modulo operation on the decoded vector w.r.t. 
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A^(a,/3). We denote the resulting vector as and 

= U^/ax (mod A^(a,/3)) = (T^ + (aa/ai)^^) (mod A^(a,^)). 


(28) 


Then, the relay transmits this vector using any capacity achieving channel code on the Additive White Gaussian Noise 
(AWGN) channel. By definition, the entropy of this vector has the property of 

li?(17«) < ^^(a,/?) < i?^F(a,/3) < C{Pa). (29) 


When Pr > Pa, this vector can be reliably transmitted by the relay straightforwardly. When P^ < Pa, we consider a 


long term of transmission during which the model is used for K G Z+ times. We only use \K 


C(Pr) 


] times Phase 1 


and fully use all K times Phase 2 of these model uses. By choosing K sufficiently large, the transmit rate can be made 
arbitrarily close to 

C{Pr) 


(a,/3) 


4^(a,/3)' 


(30) 


Combining these two cases, in a long term transmission, any rate satisfying d^Tt is achievable. 

. Phase 2, node C. 

Since node C can reliably decode f/^, it can then decode by computing 


[il^ - (a 2 /ai)C^] (mod A^(a,^)) 

= [(T^ + {a 2 /ai)V^) (mod A^(a,/3)) - ( 02 / 01 )!/^] (mod Ap(a,/3)) 

= [T^ + ( 02 / 01 ) 1 /^ - {a 2 /ai)V^] (mod Ac(a,/3)) 

= [T^] (mod A(i(a,/3)) 

= T^. (31) 


Since is reliably decoded, can then be retrieved. 

As we have already discussed the reliability of the decoding in each step of the process, by choosing S' arbitrarily small we 
have the following lemma. 

Lemma 1: For any a,/3, an (a,/3) SCF code guarantees power constraint (|4|i and reliability constraint 0 with any rate 
satisfying (ISTTi if (l22li holds. 


C. Information Leakage Rate 

By Lemma [T] we guarantee that the information can be reliably transmitted from the source to the destination with the given 
power constraint. However, during the process, part of the information is leaked to the relay. Here we define the information 
leakage rate Ro{sl,(3) (sometimes referred as equivocation rate) as 

i?o(a,/3) = l/(lL^;r«) (32) 


and bound it by 

Ro{a,f3) = 


< 


- H{X^,X^) + I{X^,X^-,Y^)) 

- H{X^) - H{X^)) + C{Pa + Pb) 
Rf{a, (3) - Rf{a, (3) - i?f (a, (3) + C{Pa + Pb) 
-Rf{a,(3) + C{PA + PB)- 


(33) 


The second equality holds since the third term on the RHS of the first equality is 0 since is one-to-one mapped to 
Further, the fourth term is also 0 for that the relay knows X^ by knowing W^, and it can reliably decode X^ when X^ is 
known. Then, the inequality follows from the capacity for Gaussian MAC and the third equality follows from the definition 
of the {a, (3) SCF code. In the next section, we will propose two schemes to eliminate the information leakage. 


IV. Secure Coding Schemes 

In the previous section, we have proposed a reliable code for transmission, namely an (a, f3) SCF code. For any a, (3, a 
reliable transmission of a source symbol chosen uniformly at random from {1,2, ..., (a>/3)} is guaranteed if conditions 

(I 2 TI 1 and (I 22 I 1 hold. Then, we bounded the information leakage rate during the process Ro{a,(3) in (l3^ . 
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Fig. 2: Structure of the random binning based scheme. 


In this section, we introduce two schemes of adding extra randomness at the source, which can eliminate the information 
leakage. Both schemes are built upon the (a,/3) SCF code. The first one uses the classical random binning idea and is 
constructed in a two-layer structure. We use the (a, (3) SCF code as inner code and a random binning code as outer code. The 
second scheme is a lattice chain based scheme using an (a, (3) SCF lattice chain code, in which a mid-layer lattice is added to 
the lattice codebook of the (a, (3) SCF code to create randomness. Since this code is a modihed version of (a, (3) SCF code, 
we will describe the difference between this code and the (a,/3) SCF code described in Section Hill 


A. Random Binning Based Scheme 


The classical random binning idea is introduced in ||2| and widely used in many secure transmission scenarios. Here, we 
borrow the idea of the random binning codes from HD and the two-layer structure from M. We propose a random binning 
based scheme (RB scheme), which is constructed by an (a, f3) SCF code as inner code and a random binning code as outer 
code. The random binning code is designed to encode the messages into a long sequence of lattice codewords of a chosen 
(a, (3) SCF code. Here we introduce our random binning code in detail. 

1) Random Binning Code: 


• Codebook Construction Generate bins, where I should be chosen sufficiently large. Label each bin by a 

different length-Z typical sequence of W^. The size of each bin (the upper bound for the number of the codewords in 
each bin) is , ^^ere I' = I 

Generate 2^^* (a./3)r* 1 codewords. The codewords are length [('] sequences of A^-dimensional lattice codewords generated 
with the codebook described in Section IIII-AI Put the codewords into the bins uniformly at random until all bins are 
hlled. 

• Encoding For each length-Z sequence of source messages, the encoder chooses the bin with the same label, then chooses 
a codeword from the bin uniformly at random and transmits it. If the message sequence does not match any label of 
bins, or there is no codeword in the matching bin, it transmits a random length-[Z'] sequence of lattice codewords as its 
codeword. The code structure of the RB scheme is illustrated in Fig. |2] 

• Transmission Here, we consider that we use our model [Z'] times. Each time a lattice codeword is reliably transmitted 
from node A to B. Thus, after [Z'] times, a random binning codeword is reliably transmitted. For each phase, the channel 
is used for N\l'~\ times. 

• Decoding By receiving the codeword, it looks that up into the codebook and uses the label of the bin as the estimation. 


2) Reliability: Since the reliability of the {a., (3) SCF code is already shown in Section [Bll we now show the reliability of 
the random binning code. 

A length-Z sequence of source messages can be reliably retrieved if the length-[Z'] sequence of lattice codewords is reliably 
decoded and is the codeword for the correct messages. The former is guaranteed by Lemma [T] An error in the latter can be 
caused either by an unlabeled message or an empty bin. There are two situations for the unlabeled messages. 1, the message 
is typical but there is no matching label. 2, the message is not typical. By the property of typicality, the probability for both 
situations to occur are negligible when N,l oo. Moreover, since the expected number of codewords in one bin is almost 
2iNR„{a,i3)^ by the law of large number, the probability of the existence of empty bins is also negligible when N,l oo. 
Hence, the estimation error is vanishing when N,l ^ oo. 

3) Information Leakage Rate: Here, we show that the RB scheme achieves the information theoretic security. 

Lemma 2: For any <5 > 0, there exist a sequence of codes constructed with an (a, (3) SCF code as inner code and a random 
binning code as outer code which achieves 

( 34 ) 


The proof of this lemma is given in Appendix lAl 























4) Achievable Secrecy Rate: Here, we discuss three cases of whether the relay has limited power and whether a is larger 
than a threshold a where 


a — \ 1 + 


1 + Pa + Pb 


(35) 


PaPb — Pa — i 

Note that a chosen (a, /3) SCF code is associated with a threshold for transmit rate Rf{a, /3). The actual transmit rate Rf{a, j3) 
can be chosen arbitrarily in [0, /3)]. Hence, for each case, we specify the code and transmit rate, i.e., a, /3, and Rl{a,/3). 

• Pr > Pa and a < g_. 

Firstly, for any {a, (3), we can bound the achievable secrecy rate of a RB scheme by 


Rs = 


N\n 


> i?f(a,/3) - i?o(a,/3) - e 

> Rfia,(3)+Rfia,(3)-CiPA + PB)-< 


(36) 


where e can be made arbitrarily small by choosing sufficiently large I and small S'. The first and the second inequality 
simply follow from the definition of I' and i?o(a,/3), respectively. 

Then, when Pr > Pa and a < a, ( 1^ is maximized when i?J(a, j3) = R\{a, j3). Note that by (l24l i. Rl{a, (3) is arbitrarily 
close to i?Qp(a,/3) when 6' is chosen arbitrarily small. Hence, any secrecy rate satisfying 


Rs < u].axRs{a, (3) 

a,/3 


is achievable, where 


Rs{a, (3) — i?Qp(a, (3) + i?Qp(a, (3) — C{Pa + Pb)- 
It can be easily calculated that the maximum is reached when a = (1,1) and = \j In this 


maxi?, 

a./3 


(a)/3) = -^log: 


1 + Pa + Pb 


(V(l + Pa){1 + Pb) - VPlP^)^ 


- 1 . 


(37) 

(38) 

case we have 

(39) 


Pr > Pa and a > a. 

In this case, first of all, if we simply apply the code of the previous case, Rf{a,j3) will be larger than C{PBlcr'^) and 
the transmitted vector will not be decodable at node C. Also, it can be calculated that the achievable secrecy rate is 
not optimal by adjusting a,/3 such that R\(a,(3) < C{PbI cr'^)- 

Actually, the maximum secrecy rate will be given by choosing a, /3, and R\{a,^) such that i?Qp(a,/3) = C{Pa), 
Rf{a,f3) very close to C{Pa), and i?f(a,/3) very close to C(Pb jcP)- The choice of i?f(a,/3) is feasible because 


Rf{a,l3) can be chosen arbitrarily close to i?0p(a,/3) and when a > a, i?Qp(a,^) > C{Pb fc^)- Thus, by 


secrecy rate satisfying 


Rs < C{Pa) + C{PbIcj'^) - C[Pa + Pb) 


any 

(40) 


is achievable. 

Pr < Pa¬ 
ir this case, for a < a and cr > ct, the setting for a, (3, and Rl{a,f3) are identical to the previous two cases, respectively. 
The difference is that the relay should apply the transmission scheme for Pr < Pa, which has already been stated in 
Subsection IIII-BI As a result, the achievable secrecy rate is simply the achievable secrecy rate of the previous two cases 


times 


C{Pr) 


Rt(^,P) ■ 

Combining the three cases, we have the following theorem. 

Theorem 1: For a two-hop channel with an untrusted relay, with the RB scheme, any secrecy rate Rs satisfying 


is achievable if cr < cr and 


is achievable if cr > cr. 


Rs < min( 


Rs < max [min (—X 

a,/3 R^ 

C{Pr) 


C{Pr) 


Cf(^’ 


A)Rs{a,l3)] 


C{Pa) 


l)iC{PA) + C{Pb/<j^) - C{Pa + Pb)) 


(41) 


(42) 


B. Lattice Chain Based Scheme 

The lattice chain based scheme (LC scheme) is inspired by the lattice chain code used in ll20i . Here, we propose an (a,/3) 
SCF lattice chain code, which is an (a,/3) SCF code with the transmitted lattice vector splitting into two parts, a message 
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vector and a random vector. Now, we describe this code in detail. Since it is modified over an (a,/3) SCF code, we only 
focus on the parts that are modified. All the notations and terms have the same meanings as in Section |III] without further 
explanation. 

1) Coding Scheme: The codebook of an (a,/3) SCF lattice chain code is also constructed with the lattices A and A^(a,/3) 
of an (a,/3) SCF code. Besides, a mid-layer lattice A^(a,/3) for which A^(a,/3) C A^(a,/3) C A is introduced for the 
codebook construction. For arbitrarily chosen i5' > 0 and 6” G (0, (YhieiA b\ ^cf(^’/5) “ C{Pa + Fb))/ 2], these lattices 
should satisfy all properties listed in Subsection IIII-AI and three additional properties as follows. 

• Rate of the Randomness: For the given S", we have 

i?o(a,/3) -(5" < i?^(a,/3) < i?o(a,^), (43) 

where i?^(a,/3) = ^ loga |A^(a,/3) n V^(a,/3)|. 

• Nesting of A^(a, /3): The coarser one of A^(a, /3) and A^(a, /3) is nested in the finer one. 

• Goodness of A^(a,/3): The lattice A^(a,/3) is good at both quantizing and shaping. 

By ifTfil . lattices satisfying these properties can be found. We then define Rf{a,f3) = log 2 |An V^(a,/3)| as the rate of 
the lattice codebook for the messages and Rf{a,l3) = ^ log 2 |An V^(a,/3)| as rate of the codebook for transmission. 

In Fig. |3] we show the structure of a codebook of node A. 


. i . 








• X 



X 



X 


















• X 



0 



X 


• • 
















• 1 X 



X 



X 











0 

S 


A 

A^(a,/3) 

A^(a,/3) 


Fig. 3: A codebook of node A for an (a,/3) SCF lattice chain code. 


Clearly, we have 

Rf{a,f3)=Rf{a,(3) + R^{a,l3). (44) 

The source symbol chosen uniformly at random from {1,2,..., FJ^(a, (3) G [0, Rf{a, /3)] is mapped to a codeword 

in the lattice codebook A fl V^(a, (3). Further, we denote 

Rf{a,f3)=Rtia,f3) + Rtia,/3). (45) 

We assume all the lattices and codebooks are revealed to all four nodes. 

2 ) Transmission Process: The transmission process is similar to the transmission process described in Subsection IIII-BI 
Here, we only focus on the steps which are different, which are (Phase 1, node A), (Phase 1, the relay), (Phase 2, the 
relay), and (Phase 2, node C). 

• Phase 1, node A. Firstly, the message is uniquely mapped to a lattice vector in A fl V^(a,/3) by the encoder. 
Then the encoder adds a vector which is chosen uniformly at random from A^{a,f3) fl Vp(a,/3). Then, a dither 

^ I4{y^{a, (3)/ (3a) is chosen. The transmitted lattice vector of node A is 

^ J(J,A ^ v^)/I3a + D^] (mod A^ia, (3)/^- (46) 

• Phase 1, the relay. Upon receiving in O, by m, the relay can reliably decode 

= ai{T^ + V^)+a2V^ 

with the lattice A. 

• Phase 2, the relay The relay firstly scales the decoded vector down by computing U^/ai = {T^ -b V^) + (a 2 /ai)U^. 
Then, instead of AQ{a,(3), the relay takes a modulo operation on the decoded vector w.r.t. A^(a,/3). We denote the 
resulting vector as and 

U(^ = U^/ai (mod A£(a,/3)) = (T^ -f {a 2 /ai)V^) (mod A£(a,/3)). 


(47) 
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The relay then transmits this vector using any capacity achieving channel code on the AWGN channel. Since by definition 
we have ^H{U^) < Rf{aL,(3), the transmission is reliable when C{Pfi) > Rf{a,/3). Thus we have the power constraint 

Pr > - 1. (48) 

Note that if Pr is smaller than the requirement in the constraint, a similar approach as the one stated in Section |III] can 
be used. However, it can be calculated that the optimal solution is that we adjust a, (3 as well as the codebook to Pr. 
The details and the achievable rate of this solution will be given later in this subsection. 

• Phase 2, Node C. Since the vector IJ^ is reliably decoded, node C can then decode by computing 

[U^ - {a 2 /ai)V^] (mod A^(a,/3)) 

= [(T^ + {a 2 /ai)V^) (mod A^{a,(3)) - ( 02 / 01 )^^] (mod A^(a,/3)) 

= [T^ + {a 2 /ai)V^ - {a 2 /ai)V^] (mod A^(a,/3)) 

= [T^] (mod A^(a,/3)) 

= T^. (49) 

Since is reliably decoded, can then be retrieved. 

3) Information Leakage Rate: Here, we proof that the LC scheme is information theoretically secure. 

Lemma 3: For any i5 > 0, if 

i?f(a,/3)=4^(a,/3), (50) 

there exist a sequence of (a, /3) SCF lattice chain codes which achieves 

ll{W^;Y^)<S. (51) 


The proof of this lemma is in Appendix iBl 

4) Achievable Secrecy Rate: Similar as the previous section, we also distinct three cases w.r.t. Pr and a. For each case, 
we specify the settings of a, /3, and R\{a,(3). 

• Pr > Pa and a < g_. 

In this case, similar to the RB scheme, we can set Rl{a,(3) equals to R\(a,(3) and set R\{a^(3) accordingly to (l24li . 
Combining with (l35l l. (|4^ . and (|45] |. we achieve any secrecy rate satisfying (IJTT i by choosing sufficiently large N and 
sufficiently small 5'. 

• Pr > Pa and a > g_. 

In this case, if we use the same settings as the previous case, (l22l l will be violated. Moreover, unlike the RB scheme, due 
to the constraint of the (a, (3) SCF lattice chain code, using the same lattice codebook with a simple decreasing of the 
transmit rate will violate (l50l l. Hence a new lattice codebook with different a, /3 should be generated w.r.t. the constraint 

R^R[a,l3)<C{PBl<J^) (52) 

and Rl (a, (3) should be set accordingly to (l24l) . Then, we set R\ (a, /3) equal to R\(a, (3). Thus, any secrecy rate satisfying 

Rs < max Rs{a,(3) (53) 

is achievable. 

• Pr < Pa- 

In this case, unlike the RB scheme, the LC scheme guarantees a reliable transmission of as long as (l48l l holds. 
Note that our scheme holds for any pair of a, (3. Moreover, as long as Pr < Pa, by ms, for any secrecy rate Rf{a,f3) 
satisfying (|48] |. there exists a pair of a, (3 which achieves that rate. Hence, by choosing a, [3, and the codebook accordingly 
to (|48] |. we can straightforwardly achieve any secrecy rate smaller than C{Pr). 

Combining the three cases we have the following lemma. 

Theorem 2: For a two-hop channel with an untrusted relay, with the LC scheme, any secrecy rate Rg satisfying 


i?s < min(maxi?s(a,/3),C'(Pfi)) (54) 

a,/3 

is achievable if cr < ct and 

i?s < min( max Rs{a, I3 ),C{Pr)) (55) 

a,/3:Pgp(a./3)<C(PB/<T2) 


is achievable if ct > cr. 
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C. Achievable Secrecy Rates for Special Channel Configurations 

Here, we consider two special channel configurations. Firstly, if Pr > Pa and the jamme r is colloca ted with the destination, 
i.e., cr = 0, we can maximize the first term in (fSST l by choosing a = (1,1) and (3 = (1)> which gives us the 
following corollary. 

Corollary 1: On a two-hop channel with an untrusted relay, if Pr > Pa and a — 0, any secrecy rate Rg satisfying 


< 2 


1 -f Pa + Pe 


{a/{1 + Pa){1 + Pb) - VPlPEy 


- 1 


(56) 


is achievable. 

Then, if Pa = Pb = Pr and cr = 0, by Corollary [T] we straightforwardly have the following corollary. 

Corollary 2: On a two-hop channel with an untrusted relay, if tr = 0 and Pa = Pb = Pr, any secrecy rate Rg satisfying 

Rs < + Pa) - ^ (57) 

is achievable. 


D. Comparison Between the Two Schemes 

Firstly, we compare the two schemes in terms of simplicity in deployment, the LC scheme surely enjoys the benefit of a 
simpler structure and decoding. Also, the RB scheme requires a very long sequence of lattice codewords to achieve secrecy, 
i.e. N and length I should be sufficiently large, which is not the case for the LC scheme in which only N needs to be chosen 
sufficiently large. 

Then, we compare the achievable secrecy rates of the two schemes. In the case of Pr > Pa and a < a, both of the two 
schemes achieve the same secrecy rate of (IJTT i. Then, when Pr < Pa, thanks to the chain structure, the LC scheme allows 
the relay to save the part of the energy of transmitting the random vector V^. This feature allows the LC scheme to achieve 
a secrecy rate that equals the capacity when the relay has limited power, while the RB scheme underperforms. In other word, 
when a < a, the rate of the LC scheme (l54l) is always no lower than the rate of the RB scheme drill . In Fig. |4(a)| where 
Pa = Pb = 30dB and the destination is used as the jammer, it is clear that the curve of the LC scheme is higher than the RB 
scheme and coincides with the upper bound. Note that in this paper all the powers are shown in dB, since they are actually 
the SNR with unit noise. 

In the case of Pr > Pa and a > a, for the sake of reliable decoding of at node C, the transmit rate should be reduced. 
For the LC scheme, due to the constraint of (fSOl l. node B cannot simply use the same lattice codebook and reduce its transmit 
rate. Hence, in this case, the RB scheme could achieve a higher rate than the LC scheme. In Fig. |4(b)| the rate of the RB 
scheme is always higher than the LC scheme. However, they are both far away from the upper bound when a is large. The 
shape of the curve of the LC scheme is due to the fact that sometimes the achievable secrecy rate is maximized by choosing 
a different oi for the different cr, which is a positive integer. 

In the case of Pr < Pa and a > a, it will be a trade-off between these two issues. As observed in Fig. |4(c)| when cr^ = 3dB, 
the LC scheme performs better when Pr is low, but is overtaken by the RB scheme when Pr is larger than some threshold. 

Summarizing the three cases discussed above, a new lower bound on the achievable secrecy rate on this channel is derived. 

Corollary 3: On a two-hop channel with an untrusted relay, any secrecy rate Rg satisfying 


is achievable if cr < a, and 


Rg < min ( max Rg {a., (3), C{Pr) 

\ a,/3 


(58) 


Rs < max 


min max Rg(a, i3),C{Pr) 

ya./3:ijgp(a./3)<C(PB/^T2) ^ 

{C{Pa) + C{PbIu^) - C{Pa + Pb)) 


CjPR) 

C{Pa)\ 


is achievable if cr > cr. 


(59) 


V. Performance Analysis and Comparison 

In this section we compare the achievable secrecy rate of our schemes and other schemes under various scenarios. 

A. Symmetric Two-hop Channel with Destination as Jammer 

We first discuss the very well studied symmetric two-hop channel with the destination functioning as a cooperative jammer, 
which is a special case of our model when Pa = Pr = Pb and cr^ = 0. Here, both our schemes achieve the sames secrecy 
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(a) The comparison under the limited relay power condition (destination 
functions as the jammer). 



(b) The comparison under the non-collocated jammer and destination 
condition. 



Fig. 4: Comparison between the achievable secrecy rate of the RB scheme and the LC Scheme 


rate of (l57l) . We compare it to the achievable secrecy rate with an amplify-and-forward based scheme proposed by Sun et al. 
in IHl and a modulo-and-forward based scheme propose by Zhang et al. in ||9l- Their achievable secrecy rates are in (fTOl l and 
(fTTb . respectively. In particular, (fTTT i can be simplified to 

+ ( 60 ) 

We also compare our schemes with the compress-and-forward based scheme proposed by He et al. in JU.The achievable 
secrecy rate is in (fT2li and can be simplified to 

+ Pa^-1- (61) 

In Fig. |5] we set Pa = Pb = Pr = 20dB and compare these schemes with the upper bound ([8]l. Moreover, we show the 
rate of He et al. in m and Vatedka et al. in HI in the same figure, although these are the rates for strong secrecy and 
perfect secrecy, respectively. We also show the capacity without the consideration of secrecy as a reference. It is clear that our 
scheme outperforms all other existing secure transmission scheme in the high SNR region and is upper bound achieving when 
Pa oo. Also, it is interesting to observe that, in the high SNR region, to achieve strong secrecy and perfect secrecy, a rate 
of 0.5 and 0.5 + log 2 e bits/channel use is lost, respectively. 


< 2 


2 + 


Pa 
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P^=Pb=Pr. sigma=0 



Fig. 5: Comparison between the achievable secrecy rates of variant schemes in a symmetric two-hop channel using the 

destination as jammer. 

B. Asymmetric Two-hop Channel with Destination as Jammer 

In case of cr = 0, we compare our schemes to the capacity without secrecy constraint, the upper bound dH), as well as the 
schemes by Sun et al. in || 8 ], Zhang et al. in jg], and He et al. in ID, the rates of which are in (fTOl l. (fTTl l. and (fT^ . respectively. 
It can be observed from Fig | 6 (a)|[ 6 (c)| that if we fix two of Pi, i G {A, B, i?} and change one of them, our schemes outperform 
all other schemes except for the low source and/or jammer power case. Moreover, the LC scheme achieves the upper bound 
for the low relay power cases (the curve coincides with the upper bound). To the best of our knowledge, this is the first upper 
bound achieving scheme for the limited relay power and non-infinity source power case. 

Furthermore, we compare the achievable secrecy rate of various schemes with the upper bound in the case of Pb = aFUj a > 
0, and Pa oo. In this case, we define the gap between the upper bound of the secrecy rate derived in ||4| and the channel 
capacity without secrecy consideration as 

Go = lim [min(G(PA),G(PR)) - min(i? 6 ,G(PR))], (62) 

Pa^oo 

where Rb is the upper bound given in ®. Note that this upper bound is only for the secrecy rate in Phase 1. In Phase 2, 
the secrecy rate is upper bounded by C{Pb). Similarly, for each secure transmission scheme, we define the gap between the 
achievable secrecy rate and the capacity without secrecy consideration as 

G = lim [min(G(PA),G(Pfl)) — limsup i?s], (63) 

Pa^oo Ar->oo 

where Rg is the achievable secrecy rate of the scheme. 

When Pb > Pa, both our schemes achieve any rate satisfying dJTl l. in which the RHS equals the RHS of (l39b . It can be 
calculated that we have G = Gq = G{l/a), which reflects that our schemes are upper bound achieving in this case. Then, 
when Pb < Pa, the LC scheme still achieves the upper bound, which in this case is the channel capacity without secrecy 
consideration, i.e., G = Go = 0. 

The Go value as well as the G values of various secure transmission schemes are shown in Table |T] for some channel 
configurations. Here, 7 is defined as a positive real number. Is is shown that the LC scheme is the only upper bound achieving 
scheme in all the three cases considered in the table. For all other existing schemes, there are always gaps of at least a constant 
between the achievable secrecy rate and the upper bound in one or more cases. 

In Fig. | 6 (d)| and |7(a)| we show the cases of 7 = 1 , 0 ; = 10 and 7 = l,a = 0.1, respectively. In Fig. |7(b)| we fix 
Pb = 20dB, Pb = O.lP^i and show the performance of various schemes when Pb is limited. 

C. External Jammer 

Since the external jammer case is only considered by He et al. in a, we compare our schemes to their scheme in Fig. | 8 (a)| 
and Fig. | 8 (b)| for different cr^ and Pb- In Fig. | 8 (a)| it can be observed that our schemes perform better when a is small. When 
the channel between B and G is too noisy, the scheme of He et al. achieves a better rate. In Fig. | 8 (b)[ it is shown that our 
schemes have better performance in the limited relay power case. In particular, if the relay power is very low, the LC scheme 
is upper bound achieving even for large a. 
























Rate Rate 
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(a) Pa<Pb = Pr = 20dB. (b) Pg <Pa = Pr = 20dB. 



(C) Pg<PA = PB= 20dB. 



(d) Pb = IOPa,= Pa- 


Fig. 6 : Comparison between the achievable secrecy rates of various schemes in asymmetric two-hop channels using the 

destination as jammer. 



II 

Pn fixed 

7 < 1 

7 > 1 

Go (Upper bound 01) 

0 


0 

G (RB scheme) 

C(Pr) 1 \ 

C(PA)^^a> 


0 

G (LC scheme) 

0 


0 

G (He’s scheme 0) 

C(i) + G(7) 

[G(i),G(i) + G(i)]^ 

0 

G (Zhang’s scheme 0) 

C(i) + G(7) 

C'(i) + C(i) 


G (Sun’s scheme 0) 

C(i) + G(7 + a) 


Ci^)+CiT^,) 


^ If Q > 1, the G value is C(i) -I- C(i). However, if q < 1, the G value can be smaller than -I- C'(i) 
depending on a. Hence, we only show the interval for the rate here. 


TABLE I: The Go and G values for various schemes when Pb = uPa and Pa oo. 
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Fig. 7: Comparison between the achievable secrecy rates of various schemes in asymmetric two-hop channels using 

destination as jammer (Continued). 




Fig. 8; Comparison between the achievable secrecy rates of various schemes in two-hop channels with an external jammer. 


VI. Two-Hop Channel with an Eavesdropper 

In this section, we propose another channel model, in which we consider the case that the relay is honest and cooperative, 
but there is an external eavesdropper. 

A. Model 

We firstly consider a two-hop channel in which node A wants to transmit information to node B using a relay node R to 
forward the information. During the process an eavesdropper is trying to obtain the information transmitted by node A. In this 
model we assume that the destination B also functions as a cooperative jammer. We also assume that the communication takes 
places over two phases, each including N channel uses. We use X^, G for the transmissions of node A, the 

destination B, and the relay R, respectively. We use Y^, Y-^, Y.f', Y^ G for the receptions of the relay, the eavesdropper in 
the two phases, and node B, respectively. In the first phase, node A transmits to the relay R and this transmission is eavesdropped 
by the eavesdropper E. The destination B simultaneously transmits a jamming signal to confuse the eavesdropper, which is 
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also superimposed with the transmission of node A at the relay H. Hence, we have 

+ h2X^ + Z^, (64) 

Yf = h[X^ + h'^x^ + , (65) 

where Z^ and Zf are iV-dimensional independent Gaussian noise vectors and (ii, / 12 , h[, h '2 S K.'*" are the channel coefficients. 
We further denote h = ((ii, / 12 ) and h' = / 12 ). 

In the second phase, the relay transmits to node B, which is also overheard by the eavesdropper. 

= h2X^ + Z^, (66) 

Y2^ = h^X^ + Z^, (67) 

where channel coefficient /13 G R+ and Z^^Z^ are also TV-dimensional independent Gaussian noise vectors. The model is 
illustrated in Fig. |9] 




G 


G 





(b) Phase 2 


Fig. 9: Two-hop channel with an eavesdropper. 


The power constraints for the transmission of node A, B, and R are given in (|4|i. W.l.o.g., we let all noise vectors have unit 
variance in each dimension. We assume the power constraints as well as all channel coefficients are revealed to all nodes. In 
this model, the reliability constraint is still (|5]l. However, the secrecy constraint becomes 

lim ^I{W^-Y^^,Y2^)<5 ( 68 ) 

N —¥00 rs 

for any chosen 5 > 0 . 

Remark 2: This problem is essentially different from the normal wire-tap type of problems or the problem we introduced 
in Subsection III-AI The main difference is that the information is leaked to the eavesdropper twice from the source and the 
relay, respectively. Most of the existing secure transmission problems only focus on preventing the eavesdropper from getting 
information from one source. 


B. Coding Scheme 

Here, we show that the RB scheme can be straightforwardly applied to achieve a positive secrecy rate if the transmit rate 
of the (a,/3) SCF code is set appropriately. The key for the deployment of the RB scheme is that the transmit rate should be 
chosen such that the eavesdropper can decode the same linear combination that the relay decodes. Then, the reception of the 
eavesdropper in the second phase will be a degraded version of the first phase, i.e., H{Y,f\Y^) = 0 . 

Before setting the transmit rate, we first give the definition of the computation rate in this model. Note that the expression 
of the computation rate is different from (fTsT l. which is due to the non-unit channel coefficients. The code and the transmit 
process are essentially the same. We define the computation rate in this model for T G {A, B} as 




( 69 ) 








17 


where 


A^(a,/3,h*) 


h\h%PAPB{ail3A - a2l3By + {aihAl3A)'^PA + {a2hBPB)'^PB 
h\PA + h^PB + 1 


(70) 


Here, h* = {hA,hB) G K.'*". Note that A/'(a,/3,h*) is simply A/'(a, in (fT9l l with all P^ substituted by hfPi. 

Now we set the value for the transmit rate S {A,B}. Firstly, to guarantee P[{Y^\Y^) = 0, we let the relay 

decode a linear combination aiX^ + a 2 X^ which the eavesdropper can also decode. In this case, the transmission of the 
relay at Phase 2 will not leak more information since we have a Markov chain -A aiX^ + a^X^ -A X^ -A Y^. By the 
data processing inequality we have P[{Y^\Y-^) = 0 and 


I{W^] Yf, Y^) = I{W^] Y^). 


(71) 


Byna, there exists a sequence of lattice codes with which the relay and the eavesdropper are both able to decode aiX^+a^X^ 
if the transmit rate of node i G {A, B} satisfies 

f3) < min(.R^F(a, /3, h), .RcF(a, /3, h')). (72) 

Similarly to (O, the information leakage rate of this code can be bounded by 

RoisL,f3) < C{h[^PA + h'^^PB) - RfisL,f3). (73) 


Now, using the RB scheme with the transmit rate of the (a, j3) SCF code set accordingly to ( l72l i and the random binning 
code generated w.r.t. ( f73t . the reliable and secure transmission is guaranteed. The proof for the reliability and security are 
identical to the proof we given in Subsection IIV-AI We thus have the following theorem for the achievable secrecy rate. 
Theorem 3: In a two-hop channel with an eavesdropper, any secrecy rate satisfying 

Rs < inax ^ {mi\i{RQ^{&,(3,\)),Rc^{aL,l3,h'))^ -Cih'-y^PAph'^PB) (74) 

i^{A,B} 

is achievable if > j^Pa and any secrecy rate satisfying 

y] (min(i?bF(a,/3,h),i?bF(a,^,h'))) + 

_ CjhlPR) _ 

min(.R^F(a, /3, h), R^^ (a, /3, h')) 

(75) 

is achievable if Pr < ^Pa- 

Remark 3: When h\ — hi, h '2 = /i2, and Pr > -^Pa, Theorem [3] mimics our result in Corollary [T] However, when the 
eavesdropper has a bad channel, e.g., h'l -A 0 and h '2 -A 0, the achievable rate in Theorem [3] tends to zero, which reflect the 
sub-optimality of this scheme. 

In Fig. [To] we show an example in which the RB scheme achieves a positive rate on a two-hop channel with an eavesdropper. 
The achievable secrecy rate is identical to the untrusted relay case when hi = h 2 = h'l = h '2 = 1 and decreases if the h '2 
increases. With our scheme, a large h'l or a large /12 will both result in small or even no secrecy rate at all. 


R. 


< max ■ 
a./3 


VII. Conclusion 

In this paper, we proposed two novel reliable and secure transmission schemes for the two-hop channel with an untrusted 
relay. These are the first secure transmission schemes that use the scaled compute-and-forward technique. We have shown that 
when the cooperative jammer and the destination are collocated, both of our schemes achieve relatively good secrecy rates in 
the high SNR region. Especially, for Pb = uPa, Pr = tPa, ot,^ & M’*', and Pa -a 00, our schemes are the first upper bound 
achieving schemes for any a and 7. Moreover, the LC scheme is the first upper bound achieving scheme if Pr is limited and 
Pa is not unbounded. In summary, our schemes significantly improve the achievable secrecy rate lower bound and achieve 
the upper bound in two cases; 1 , Pr is limited and Pa does not go to inhnity. 2, Pa, Pb, Pr linearly related and go to 
inhnity. 

Also, we proposed another two-hop channel model in which the relay is trusted but there exists an external eavesdropper. 
We showed that our RB scheme can also be exploited in this model and achieves a positive secrecy rate. 
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Fig. 10; Achievable secrecy rate in a two-hop channel with an eavesdropper when hi — h 2 = h'l = 1 as a function of h^. 


Appendix A 
Proof of Lemma|2] 

Proof: By analyzing the information leakage rate, we will have 

= -^{H{yv'^)-H{x^,x^\y^)-H(yv^\y^,x^,x^) + H{x'^,x^\y^,yv^)) (76) 

= H{x^,x^) + i{x^,x^;y^) + H{x^,x^\y^,]y^)), (ii) 

where is length-^ sequence of source messages and X^, X^, and y^ are length-[Z'] sequences of the transmissions of 
the source, the transmissions of the jammer, and the receptions at the relay, respectively. The third term in (l76l l is 0 since the 
mapping error from the codewords to the source messages is almost zero as we stated in Segment I1V-A2I Then we focus on 
the last term H{X^,X^\y^,W^). This term can be upper bounded by Fano’s inequality since the relay can determine the 
transmitted codeword almost surely. The reason is that the size of the bin is chosen accordingly to the information leakage 
rate. 

More precisely, for any transmitted message, by the leaked information, the relay is able to list almost possible 

X^ as candidates from a total of )\ + li'NRa{a,i3)\ codewords. Then, since the random binning process is independent 

and uniform, the relay can determine the transmitted codeword almost surely if it also knows the label of the bin when 

N, I —>■ oo. 

Then, by Fano’s inequality, we have 

H{x^,x^\y^,yv^) 

- IN IN 

< e', (78) 


where Pe, e' ^ 0 when N oo. 
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Hence, we have 
1 


= - H{X^) - H{X^) + I{X^,X^; y^) + H{X^, x^\y^, W^)) 

= ^{lH{W^)-llHiW^)\ - L/'iVi?o(a,^)J - \nNRf{ai,f3) + \ni{X^,X^-Y^) + e' 


< 

< 

< 

< 


IN 

1 

Jn 

1 

Jn 

1 

Jn 

2 

JJJ 


{IH{W^) -\IH{W^)\ -\l'NRo{si,^)\ - \l'}NRf{si,^) + \1']NC{Pa + Pb)) + e' 
(1 - \1'NC{Pa + Pb) - (a,/3)J - (a,/3) + {^NC^Pa + Pb)) + e' 

(2 - 1'N{C{Pa +Pb)- i?f (a,/3)) + \1'}N{C{Pa + Pb) - + e' 

I —-Rf (a,/3) + ^(Pa +-Pb) , 

^ I ^ ’ 


(79) 


which can be made arbitrarily small by choosing sufficiently large /, N. Here, the second equality follows from our codebook 
construction, where P[{X^) = \IH{W^)\ + \ l' N RoJsl, j3)\ and H{X^) = \l')N Rf {a., (3). The first inequality follows from 
the capacity of the Gaussian MAC. The second inequality follows from (l3^ . 


Appendix B 
Proof of Lemma[3] 

Proof: Firstly, since X^ is independent of X^ and the dithers are known, by (l45l l we have 

Li^H{W^)-H{X^)-H{X^)) 

= P^(a,/3)-P^(a,/3)-Pf(a,/3) 

= -P^(a,/3)-Pf(a,/3). (80) 

We can then upper bound the information leakage rate at the relay by 

= ^{H{W'^) - H{X^, X^\Y^) - H{W^\Y^, X^, X^) + H{X^, X^\Y^, W^)) 

= ^(£r(fF^) - H{X^) - H{X^) + I{X^, x^-Y^)) + ^H{X^, X^\Y^, W^). 

< -Rt{a,f3)-R^{a,f3) + C{PA + PB) + j^H{X^,X^\Y^,W^). (81) 

Here, the second equality follows a similar argument as (f?^ . The inequality follows from dSOl l and the Gaussian MAC capacity. 

By ll2n Theorem 2, 3], the decoder can reliably decode X^ and X^ from Y^ and with all the dithers, lattices and 
coefficients by a regular lattice decoding scheme if (ISOl l holds. Here, we briefly explain the decoding process. 

Firstly, we let the relay decode aiiV^ + T"^) +a 2 V^. By ifTSl . the decoding is successful if dZTl l holds, which is guaranteed 
by (l24l i. Then, since the relay already knows and the codebook, it knows as well. We let it subtract and decode 

by treating ai(17"^ + + 02as noise. It is proved that the decoding is reliable if 

P^(a,/3) <C(Pa + Pb)-P f (a,/3), (82) 

which is guaranteed by d^ . (l43T l. and dSOl l. Then, it can also decode by subtracting ai{V^ + T^) from ai{V^ + T^) + 
a 2 V^. Hence, both and are decoded and then X^ and X^ are reliably decoded as well. 

As a result, by Fano’s inequality we have 

^H{X^,X^\Y^,W^) 

< 1 + Ip, log, (a,/3)) 

= l+P,(P^(a,/3)+Pf(a,/3)), (83) 

where P, is the probability of decoding errors which tends to 0 when N ^ 00 . Then, bringing back the expression of 
information leakage rate in dSTT l, combining (l3Tt , ( |4^ , and ( l83t , the information leakage rate can be made arbitrarily small by 
choosing sufficiently large N and sufficiently small 5". Hence, we finish the proof. ■ 
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